[squid-users] Yet another new cipher?

James Lay jlay at slave-tothe-box.net
Thu Jun 30 12:43:45 UTC 2016


On Wed, 2016-06-29 at 19:33 -0600, James Lay wrote:
> Yugh...starting around 10:00 facebook no longer works via
> peek/splice.  pcap contents show:
> 
> 1QTV01...CHLO....SNI.....VERS....scontent.xx.fbcdn.netQTV1
> 
> after the threeway handshake and an instant reset.  Anyone know what
> this is?  Cause I haven't a clue....screenshot of success after
> bypassing included.  Thank you.
> 
> James
> 
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
I guess I should also say that this is from the official Facebook app
on Android...just updated on Tuesday.
James
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160630/6a46eaa0/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screenshot from 2016-06-29 19-32-43.png
Type: image/png
Size: 58978 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160630/6a46eaa0/attachment-0001.png>


More information about the squid-users mailing list